All modules · hover any one to see it

Detect. Fix. Patch. Rationalise. Package. Upgrade.

Security and Compliance platform

Continuous security monitoring.

One intelligent platform for continuous security monitoring, instant vulnerability remediation, CVE fixes, application rationalisation, instant application packaging, patching and estate optimisation. No waiting for the next scan. No manual vulnerability chasing. No complex processes. Continuously discover vulnerabilities across your estate, prioritise the risks that matter and instantly remediate them, helping keep your environment secure and up to date.

One platform. Every module. Zero blind spots.

1console for every module, from one outbound-only agent
4 hrsNVD, CISA KEV and EPSS refreshed against your estate
14 daysPatch clock running on every KEV exposure
48security configuration facts snapshotted daily per device
apaasassure.com/app/executive.html
Detect NVD, KEV, EPSS, config→ Decide 5Rs and Proactive AI→ Package PSADT to your standards→ Deploy Intune or ConfigMgr→ Verify agent reports back→ Evidence for the assessor
One platform, read five ways

What does Assure do for you?

Pick your seat at the table. The same estate data answers a different question for each of you, and the same fix closes the loop for all of you.

The platform

Every module. One agent. One console.

Everything below runs from the same outbound-only agent and lands in the same audit trail. Filter by who it serves.

In development now

On the dev estate today, on yours next.

Built the same way as everything else: a signed catalogue script, no agent rebuild, no inbound ports, advisory by default and switched on per client.

New module

App Deployment

Fix it from the place you found it. Approved, signed PSADT packages deployed by the Assure agent to the devices you choose, in rings you control, with no SCCM, Intune or winget in the path. Each install is confirmed by a detection rule and by the vulnerability clearing in the Risk Register, and every failure comes back with its reason.

Signed packagesRings you controlSelf-service optionFull audit
New module

Server Traffic Tracking

What your server applications talk to, inbound and outbound, as one interactive picture: which servers, services and databases depend on each other, so a change, a migration or a decommission starts from facts rather than memory.

Inbound and outboundService dependenciesInteractive mapPer client
New module

Remote Support

Consent-based screen sharing for your service desk, over LAN or VPN, with no relay and no third-party cloud. The user sees a PIN prompt and a red banner while a session is live, view or view and control, and every session lands in the audit log. Pushed by Intune or ConfigMgr like any other package.

No relayOn-screen consentTLS 1.2+ pinnedAudit logged
Coming soon

Assure Legacy

The older line-of-business applications your business still relies on, kept running and kept under control, delivered through the Assure Console. Launch details will follow.

Assure ConsoleOlder applicationsManaged and audited
How it works

From exposure to evidence, on your own tooling.

Assure does not replace Intune or Configuration Manager. It drives them, and it proves what they did.

  1. 01

    Connect

    ITAM, Intune, Configuration Manager and the agent connected in an hour. Outbound only. Nothing opened inbound.

  2. 02

    Collect

    Devices, applications, real usage per user, Defender state and a daily configuration snapshot.

  3. 03

    Correlate

    NVD, CISA KEV and EPSS every four hours, the true latest version of every product, scored against your control framework.

  4. 04

    Decide

    The 5Rs engine and Proactive AI rank what matters. KEV and the 14-day clock jump the queue. You approve.

  5. 05

    Package and deploy

    The fix is built in PSADT to your standards and staged to Intune or ConfigMgr, or run by the agent from the hash-pinned catalogue.

  6. 06

    Prove

    Every decision, action and result on the audit trail. Board posture, control evidence and exports on demand.

Outbound only

The agent posts HMAC-signed requests to the platform. No WinRM, no inbound firewall rules, no relay server.

Hash-pinned catalogue

Every automation script is pinned by SHA-256. If a byte changes, it does not run.

Advisory by default

Remediation proposes, you approve. Autonomy is a tier you switch on per client, not a default you switch off.

Hosted in your region

Deployed to the Azure region you choose, data scoped per client, engineered by the team that packages your applications.

What good looks like

Numbers we run the platform to.

14 daysPatch window tracked live against every KEV exposure
4 hrsRefresh cadence for the NVD, KEV and EPSS overlay
MinutesTo package an application to your standards, not the fortnight a packaging house quotes
100+New CVEs published every day, each one correlated to your estate rather than a generic feed
28%Of the software estate typically retired in year one through the 5Rs
100%Audit-trail coverage on every rationalisation, governance and remediation decision
15 minsRead-only tenant connection to size the Microsoft 365 licence saving

Customer-specific outcomes vary by estate size, sector and existing tooling. Measurable targets are agreed during the pilot. CVE volume per NIST NVD.

Customer story

"We retired 137 apps with zero user complaints and shaved 31% off our software spend in the first quarter. The repackaging that used to go out to a third party now happens in-house in an afternoon."

IT Director · Water utility · 8,500 devices

Water and utilitiesDefence and aerospaceTransport and railGovernment and public sectorInfrastructure consultancy
Fastest proof

Microsoft 365 rightsizing

A fifteen minute read-only connection to your tenant. We measure what every user actually does on desktop, mobile and web, then price the seats nobody is using.

  • Connection time 15 minutes
  • Measured on Real per-user activity
  • What it finds Inactive, duplicate and web-only seats
  • Access needed Read only, via Graph

Typical finding £100,000s a year

Worked example: an estate of 1,400 devices. One resize and health check identified over £115k of reclaimable licence spend, with the usage evidence behind every seat.

See where your estate is exposed today.

Forty-five minutes on your own data, or ours. Onboarding in days, no procurement friction.